backport checks for degenerate Diffie-Hellman public exponents from
OpenSSL-0.9.8a, where they were added without a corresponding patch to
0.9.7 or an advisory!  ok theo@ markus@
remove an 'is' from the comment to make the sentence correct.
ok jmc@, mbalmer@
Add a -hex option to 'rand' to output hexadecimal output.
ok djm@ miod@, man page help from jmc@.
reformat using 'openssl x509 -text -fingerprint -sha1' and sort by
'openssl x509 -hash'. ok beck@
back out last patch due to updated committed prematurely
reformat using 'openssl x509 -text -fingerprint -sha1' and sort by
'openssl x509 -hash'. ok beck@
update a couple of existing CAs that has been changed. ok beck@
remove expired certificates. ok beck@
potential fd leak (we will fix this before we move to cloning)
add class 1 and class 3 root certificates from CAcert.org. ok beck@
Merge from vendor branch OPENSSL:
import of openssl-0.9.7j
Merge from vendor branch openssl:
import of openssl-0.9.7j
import of openssl-0.9.7j
import of openssl-0.9.7j
import of openssl-0.9.7j
resolve conflicts
crank shlib_version
fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339;
ok beck@ miod@
Use S_IS* macros insted of masking with S_IF* flags. The latter may
have multiple bits set, which lead to surprising results. Spotted by
Paul Stoeber. ok djm@
openssl security fixes, diff from markus@, ok & "commit it" djm@
http://www.openssl.org/news/secadv_20060928.txt for more